This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json) Hash identifier: avqR/MnS/qiFKdEoQyGPi7FWipKaH4mm6PxJzTb2/FE= Subject key identifier: D8:BC:FD:5C:78:B4:02:A8:18:E2:38:A6:42:5F:AA:70:C5:4E:FE:5A Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3 Certificate serial: 019AF12E2923E949018D614730DDEEDA9E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft Manifest number: 0247 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: dXYanRGheSqVVElmPzSnLR7prCR51hb8NX47CUKElMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:29:23:e9:49:01:8d:61:47:30:dd:ee:da:9e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3 Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=d8bcfd5c78b402a818e238a6425faa70c54efe5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:ce:f9:d8:35:d5:10:ff:a3:38:d2:9d:2d: f8:5d:1e:cd:be:28:1d:75:fb:2a:0d:2e:34:27:0c: 01:10:41:fe:80:02:3c:d7:f1:a7:5e:07:e7:cf:b7: a3:71:07:72:9d:71:61:aa:0b:0c:2d:08:56:10:04: d8:4c:6c:98:51:d4:fa:e2:d9:af:50:6e:10:e7:d2: 96:f6:fc:b2:0b:8a:88:65:eb:5a:a1:e5:e6:5a:77: 2b:9e:ac:d5:e3:5b:5e:52:06:de:bd:50:45:7c:0b: 77:02:c7:64:86:19:97:07:5b:f3:48:67:11:e0:f8: b4:06:77:37:a6:00:65:18:57:91:b1:87:5f:9a:e4: 98:c9:ed:75:22:2a:01:49:09:c8:86:be:b5:31:36: 88:4a:c8:c3:46:ca:6d:69:86:26:f4:83:31:1e:fb: 98:3e:d3:bf:79:31:35:50:a4:ba:88:51:4d:d6:37: ca:15:e7:69:61:c4:66:85:92:7f:f1:36:47:16:6d: f8:f9:fd:75:4b:d8:66:65:36:b4:31:18:53:e6:c8: 62:ad:02:ff:5a:98:f4:1a:f8:74:22:ca:aa:b5:e4: d4:76:83:4a:62:3b:c5:1b:cc:f2:46:27:64:a9:41: 90:09:77:6b:a3:83:31:ea:92:c0:4e:57:db:55:61: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BC:FD:5C:78:B4:02:A8:18:E2:38:A6:42:5F:AA:70:C5:4E:FE:5A X509v3 Authority Key Identifier: keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:87:e2:6c:8e:08:40:ec:32:73:8b:ac:1d:35:12:45:73:82: 78:18:ed:62:cc:d2:32:1a:d7:8b:44:4d:96:ad:73:77:53:34: 26:a9:77:2b:7e:4d:59:a3:e6:d0:31:19:33:5e:23:2d:bc:9c: 79:a9:a5:86:77:a1:f6:c2:4f:b0:65:c4:d1:96:ff:73:d7:8a: 79:1d:d1:4f:e6:8d:d5:a2:ed:0e:3c:33:e6:37:05:28:26:c0: ca:01:fa:3a:31:15:5b:8d:0c:ab:f0:cc:c9:b4:64:30:ca:1f: 90:e4:c0:4b:c1:a5:85:d0:76:6e:b7:3e:0b:fe:e8:0d:d6:bf: 10:5c:c7:8c:cc:ca:05:d5:51:e6:67:46:c1:a8:51:e1:c9:fb: 23:a9:5b:53:19:c2:8d:89:8d:be:3b:06:ca:80:97:c3:41:3a: b1:72:a2:49:27:1b:e8:1c:c7:4b:5c:d2:10:d0:68:3a:b4:fa: 9b:ad:1f:c9:a1:12:39:2e:6f:a2:a3:96:58:00:08:8c:35:3b: 39:71:04:22:cb:78:e1:ab:0c:50:67:e4:e9:9d:f1:42:a9:e9: 16:38:75:fa:90:6d:9e:66:42:9b:5f:74:4e:08:38:9c:9d:73: e8:81:c3:a8:58:e9:d2:81:5a:0f:ca:22:07:62:e2:4c:1f:cc: b2:4f:97:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLikj6UkBjWFHMN3u2p45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDdlN2MzNzJhOWRiMDkzMzJjNDc5YzcyOTFiODYyOTcy MWFmZTMwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD EyhkOGJjZmQ1Yzc4YjQwMmE4MThlMjM4YTY0MjVmYWE3MGM1NGVmZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN7O+dg11RD/ozjSnS34XR7Nvigd dfsqDS40JwwBEEH+gAI81/GnXgfnz7ejcQdynXFhqgsMLQhWEATYTGyYUdT64tmv UG4Q59KW9vyyC4qIZetaoeXmWncrnqzV41teUgbevVBFfAt3AsdkhhmXB1vzSGcR 4Pi0Bnc3pgBlGFeRsYdfmuSYye11IioBSQnIhr61MTaISsjDRsptaYYm9IMxHvuY PtO/eTE1UKS6iFFN1jfKFedpYcRmhZJ/8TZHFm34+f11S9hmZTa0MRhT5shirQL/ Wpj0Gvh0IsqqteTUdoNKYjvFG8zyRidkqUGQCXdro4Mx6pLATlfbVWEIOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi8/Vx4tAKoGOI4pkJfqnDFTv5aMB8GA1UdIwQY MBaAFJ4H58NyqdsJMyxHnHKRuGKXIa/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgt NTdiNDBmY2VkODI5LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgtNTdiNDBmY2VkODI5 LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIfibI4I QOwyc4usHTUSRXOCeBjtYszSMhrXi0RNlq1zd1M0Jql3K35NWaPm0DEZM14jLbyc eamlhneh9sJPsGXE0Zb/c9eKeR3RT+aN1aLtDjwz5jcFKCbAygH6OjEVW40Mq/DM ybRkMMofkOTAS8GlhdB2brc+C/7oDda/EFzHjMzKBdVR5mdGwahR4cn7I6lbUxnC jYmNvjsGyoCXw0E6sXKiSScb6BzHS1zSENBoOrT6m60fyaESOS5voqOWWAAIjDU7 OXEEIst44asMUGfk6Z3xQqnpFjh1+pBtnmZCm190Tgg4nJ1z6IHDqFjp0oFaD8oi B2LiTB/Msk+Xag== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:31 2025 by rpki-client